# https://syzkaller.appspot.com/bug?id=10041bc35eb21943495c4336d5de089c115b135e
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":1,"slowdown":1,"sandbox":"","sandbox_arg":0,"close_fds":false,"sysctl":true,"tmpdir":true,"segv":true}
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2)
syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter6\x00')
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
read$msr(0xffffffffffffffff, 0x0, 0x0) (async)
splice(r1, 0x0, r3, 0x0, 0x100000800ff04, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x1c1d42, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0xf3073df37a95d2a, 0x11, r4, 0x0)
writev(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)="a2", 0x1}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xfffffc8f) (rerun: 64)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./bus\x00', 0x840, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_win95}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_winnt}, {@utf8}, {@fat=@check_normal}, {@uni_xlateno}, {@shortname_lower}, {@fat=@tz_utc}, {@fat=@debug}, {@shortname_mixed}, {@shortname_win95}, {@numtail}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlateno}, {@shortname_winnt}], [{@obj_user={'obj_user', 0x3d, 'F{$7!,\x106\xb0\x10\x04s%\xc7J\xd2L\xd7\xdfs{3\xa8\x10y0\xb4\x8a\xd1n\x01\x88\xc2\xed\x8b#\xa3A\xc1\xc28pR \x1d\x02_ \x97\'Q\x1eX\tU\xfd\x05\x16\x9bRIb\xc1\x9c\x96a\xf5\xbbV\xe4\xfbP\x14[rr\x91#dr\x89*\x8c\x1e\x13\x1dV\a@.=f\x92\x86X\xc6\x03\xdcX\x00\x00\x94\x04\x88P\x01\x99\xd5M\x10\xc6\x94<\xc7\xa2\x12;\xdf\xf3/\x8e\xcb\xf9\xd2\xe7\xca\xd9@\t\xebw\xbd\xcc\xa5}\xaae\xca\xa7\xdaeq\x18\x92\xa4\xb4*w\xa5\xac\x94Pb\xe2?7\x1b.7\xc7\x11\xeb\x1d*\xcfU\x0500\xcd\xfb\x80y\x8d\x8a\xd3A}G\x840i\x9f\x96\"\xcc\xd6\xfd\xd0\x82\x9bg\xb1b\x16\x9f\x9c\xf9\xe5\xe1\xad}\x13.\xd5\xba>\xa8\x83<l\x1f\xeb\x95\x8eG\xc9je\x05\xef\x7f\xa4\x99\'\xb0\xdd\x173\xca\xe9S\xe67]\xff\x7f\xca\x02R\x89\x9aN(S%\xc8\xf5\xe4U\xae!{\xb0\xd4T\xdd\x95:\x1f\x1e$\x88R\xbf\xf1\xf1\xc5P\xae\x8e\x836\x1cP\x8dW\xe1\x97\x9e0\xb2\xcc\x18\xee\xb2o\xd0\xbeb'}}, {@smackfshat={'smackfshat', 0x3d, 'rodir'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0xff, 0x21a, &(0x7f00000002c0)="$eJzs3b9rk10UB/DTH+9rdUkRoSAOD7g4hTbQPUUqiAGlJUhFxGhTKE0oWAgo2HYTHNwcHd1EwcXNP0LQVXQQR4tLh0LEPCVpStRaSBObz2fJIfd8ycmSS4bn3tvnqiuLq2tLW1tfYmxsKEbzkY/toRiP4RiJ1GZEjAYAcFxs1+vxrZ7q9SwAwNGw/wPA4Dng/n/tCEcCALrs8P//ny68/Vgq56e7NRkA0C3zCzeuzBQKJ+eSZCyi+qhWrBXT13R9ZimWoxLlmIxM7ETUm9L60uXC7GTSMB7F6sZufqNWHGnPT0Umxjvnp9J80p7/L07tzeciE2c653Ot/NBmxG7+/7hwfk8+G5l4dzdWoxKL8TPbyq9PJcnFq4V9n3+i0QcAAAAAAAAAAAAAAAAAAAAAAN2QTZo6nt+Tzf5qPc3/xflAzfN1Hjfyo3HWpYIAAAAAAAAAAAAAAAAAAADQsHb/wUqpUinfaxZ35pZPt79zjIud2Scv+2CMf694/aL8/vmtm/MHav7+oS9mPnxx/eFvel71w4R/Liae5Utv1j997dQzHBH7U73+ZQIAAAAAAAAAAAAAAAAAgMHTeui315MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQO+07v/vWvF5eiLX668JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCA+xEAAP//9iSxAw==")